Cloudflare Releases Q3 2026 DDoS Threat and Global Network Disruption Reports: Record Attack Numbers

Cloudflare recently released the "Q3 2026 DDoS Threat Report" and the "Q3 2026 Global Network Disruption Report." The reports indicate that the number of DDoS attacks has reached an all-time high, although the number of large-scale attacks has significantly decreased, reflecting a shift in attack patterns.

DDoS Attack Overview

According to the "Q3 2026 DDoS Threat Report," Cloudflare successfully mitigated 18.2 million network layer DDoS attacks in the third quarter, representing a year-on-year increase of 208%. Notably, 95.75% of the attacks ended within 10 minutes, and 98% of the attack traffic was below 1 Gbps, which is characteristic of "booter DDoS attack" services.

The report highlights a sharp decline in large-scale attacks, with 251 attacks exceeding 1 Tbps recorded in the third quarter, down 69% from 805 in the second quarter. This change may be related to law enforcement successfully dismantling several large IoT botnets.

At the same time, IoT botnet threats remain active, with new variants such as Dysphoria and Evooo1Bot quickly filling the void. Mirai-related attacks peaked in August, with mitigated traffic reaching 57.23 PB.

Global Network Disruption Situation

The "Q3 2026 Global Network Disruption Report" indicates that power outages have become the most vulnerable link in the internet, causing 14 network disruption incidents across 10 countries in the third quarter. Cuba experienced four nationwide power grid failures, while outages in Honduras led to a 63% drop in national network traffic.

The report also mentions that Iraq experienced up to 19 network disruption incidents during exam periods, with 18 of these being government-led, lasting from 15 minutes to 90 minutes. Additionally, armed conflicts and natural disasters have severely impacted network connectivity.

In such an environment, even mature networks are not immune; for instance, a data center in Phoenix, USA, came close to a complete shutdown due to a cooling system failure.

Conclusion

Cloudflare's reports indicate that as attack patterns shift and global network disruption incidents increase, the risks to internet infrastructure continue to affect the stability of global networks. These findings underscore the necessity of strengthening network security and infrastructure resilience.